improve the auth module of admin pages, and set the cookie path to / by default